Download 2022 Free Microsoft MS-100 Practice Exam Questions

1. Your company has three main offices and one branch office. The branch office is used for research.

The company plans to implement a Microsoft 365 tenant and to deploy multi-factor authentication.

You need to recommend a Microsoft 365 solution to ensure that multi-factor authentication is enforced only for users in the branch office.

What should you include in the recommendation?

2. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.





Your company uses Windows Defender Advanced Threat Protection (ATP).

Windows Defender ATP contains the roles shown in the following table.





Windows Defender ATP contains the device groups shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No . NOTE: Each correct selection is worth one point.

3. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the

password below.



Microsoft 365 Username: [email protected]



Microsoft 365 Password: m3t^We$Z7&xy



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11440873







You need to prevent all the users in your organization from sending an out of office reply to external users.

To answer, sign in to the Microsoft 365 portal.

4. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username: [email protected]



Microsoft 365 Password: x?-ofP?fG70o

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11325860







You need to ensure that an external user named [email protected] can register an application in your Microsoft 365 tenant. The solution must use the principle of least privilege.

To answer, sign in to the Microsoft 365 portal.

5. Your company has a Microsoft 365 subscription and a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

An external vendor has a Microsoft account that has a username of [email protected].

You plan to provide [email protected] with access to several resources in the subscription.

You need to add the external user account to contoso.onmicrosoft.com. The solution must ensure that the external vendor can authenticate by using [email protected].

What should you do?

6. DRAG DROP

You have a pilot app named App1 deployed to a Microsoft Power Platform production environment named Prod1.

You need to reset the Prod1 environment in preparation for the production deployment of App1.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

7. Your company has 3.000 users all the assigned Microsoft 365 E3 licenses.

Some users are assigned for all Microsoft365 services, Other users are assigned licensees for only certain Microsoft 365 services.

You need to determine whether a user named User1 is licensed for Exchange Online only.

Solution: You launch the Microsoft 365 admin center, and then review the Active users blade.

Does this meet the goal?

8. You implement Microsoft Azure Advanced Threat Protection (Azure ATP).

You have an Azure ATP sensor configured as shown in the following exhibit.





How long after the Azure ATP cloud service is updated will the sensor update?

9. Your network contains an Active Directory domain named contoso.com. The domain contains 1000 Windows 8.1 devices.

You plan to deploy a custom Windows 10 Enterprise image to the Windows 8.1 devices.

You need to recommend a Windows 10 deployment method.

What should you recommend?

10. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username

below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: *yfLo7Ir2&y-



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10811525



You need to prevent non-administrators in your organization from registering applications.

11. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.





You enable self-service password reset for all users. You set Number of methods required to reset to 1, and you set Methods available to users to Security questions only.

What information must be configured for each user before the user can perform a self-service password reset? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

12. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

You configure a pilot for co-management.

You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

Solution: Define a Configuration Manager device collection as the pilot collection. Add Device1 to the collection.

Does this meet the goal?

13. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]

Microsoft 365 Password: *yfLo7Ir2&y-



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10811525



You plan to migrate data from an on-premises email system to your Microsoft 365 tenant.

You need to ensure that Debra Berger can import a PST file.

14. HOTSPOT

Your network contains an on premises Active Directory domain named contoso.com. The domain contains five domain controllers.

Your company purchases Microsoft 365 and creates a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

You plan to establish federation authentication between on premises Active Directory and the Azure AD tenant by using Active Directory Federation Services (AD FS).

You need to establish the federation.

What should you do? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point

15. Note This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You need to assign User2 the required roles to meet the security requirements.

Solution: From the Office 365 admin center, you assign User2 the Security Administrator role. From the Exchange admin center, you add User2 to the View-Only Management role.

Does this meet the goal?

16. HOTSPOT

You have a Microsoft 365 subscription that uses a default domain named litwareinc.com.

The subscription has a Microsoft SharePoint site collection named Collection1.

From the Azure Active Directory admin center, you configure the External collaboration settings as shown in the External Collaboration Settings exhibit. (Click the External Collaboration Settings tab.)





From the SharePoint admin center, you configure the sharing settings as shown in the SharePoint Sharing exhibit. (Click the SharePoint Sharing tab.)





For each of the following statements, select Yes if the statement is true. Otherwise, select No . NOTE: Each correct selection is worth one point.

17. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: *yfLo7Ir2&y-



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10811525



Your organization recently implemented a new data retention policy. The policy requires that all files stored in an employee’s Microsoft OneDrive folders be retained for 60 days after the employee is terminated from the organization.

The human resources (HR) department of the organization deletes the user accounts of all terminated employees.

You need to ensure that the organization meets the requirements of the data retention policy.

18. Your company uses email, calendar, contact, and task services in Microsoft Outlook.com.

You purchase a Microsoft 365 subscription and plan to migrate all users from Outlook.com to Microsoft 365.

You need to identify which user data can be migrated to Microsoft 365.

Which type of data should you identify?

19. Your network contains an Active Directory domain named contoso.com.

All users authenticate by using a third-party authentication solution.

You purchase Microsoft 365 and plan to implement several Microsoft 365 services.

You need to recommend an identity strategy that meets the following requirements:

✑ Provides seamless SSO

✑ Minimizes the number of additional servers required to support the solution

✑ Stores the passwords of all the users in Microsoft Azure Active Directory (Azure AD)

✑ Ensures that all the users authenticate to Microsoft 365 by using their on-premises user account

You are evaluating the implementation of federation.

Which two requirements are met by using federation? Each correct answer presents a complete solution . NOTE: Each correct selection is worth one point.

20. DRAG DROP

You have a Microsoft 365 subscription and a DNS domain. The domain is hosted by a third-party DNS service.

You plan to add the domain to the subscription.

You need to use Microsoft Exchange Online to send and receive emails for the domain.

Which type of DNS record should you add to the DNS zone of the domain for each task? To answer, drag the appropriate records to the correct tasks. Each record may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content . NOTE: Each correct selection is worth one point.

21. Your company has a Microsoft 365 subscription.

You plan to move several archived PST files to Microsoft Exchange Online mailboxes.

You need to create an import job for the PST files.

Which three actions should you perform before you create the import job? Each correct answer presents part of the solution . NOTE: Each correct selection is worth one point.

22. Your network contains three Active Directory forests.

You create a Microsoft Azure Active Directory (Azure AD) tenant.

You plan to sync the on premises Active Directory (Azure AD).

You need to recommend a synchronization solution. The solution must ensure that the synchronization can complete successfully and as quickly as possible if a single server fails.

What should you include in the recommendation?

23. HOTSPOT

You have a Microsoft 365 subscription.

You use the Microsoft Office Deployment tool to install Office 365 ProPlus.

You create a configuration file that contains the following settings.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic . NOTE: Each correct selection is worth one point.

24. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: 3&YWyjse-6-d



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10887751



You hire a new global administrator named Irvin Sayers to manage your Microsoft 365 tenant.

You need to modify Irvin Sayers to meet the following requirements:

✑ Uses at least two methods of user authentication

✑ Has the highest Microsoft Office 365 administrative privileges

25. You publish an enterprise application named App1 that process financial data.

You need to ensure that access to App1 is revoked for users who no longer require view the processed financial data.

What should you configure?

26. Your network contains an on-premises Active Directory domain named contoso.com.

The domain contains the objects shown in the following table.





You configure Azure AD Connect to sync contoso.com to Azure Active Directory.

Which objects will sync to Azure AD?

27. HOTSPOT

You have a Microsoft 365 E5 subscription and a hybrid deployment of Microsoft Exchange. The deployment contains TOO users who have on-premises mailboxes and 100 users who have mailboxes in Exchange Online.

You enable Microsoft Teams and assign a Microsoft Teams license to each user.

You need to ensure that the users who have on-premises mailboxes can use Microsoft Teams. All Microsoft Teams chat data must be searchable by using Content search in the Security fit Compliance admin center.

What should you do? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

28. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a hybrid deployment of Microsoft 365 that contains the objects shown in the following table.





Azure AD Connect has the following settings:

✑ Password Hash Sync: Enabled

✑ Password writeback: Enabled

✑ Group writeback: Enabled

You need to add User2 to Group 2.

Solution: You use the Azure Active Directory admin center.

Does this meet the goal?

29. You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. The tenant includes a user named User1

You enable Azure AD Identity Protection.

You need to ensure that User1 can review the list in Azure AD Identity Protection of users nagged for risk. The solution must use the principle of least privilege.

To which role should you add User1?

30. HOTSPOT

Your company uses Gmail as a corporate email solution.

You purchase a Microsoft 365 subscription and plan to move all email data to Microsoft Exchange Online.

You plan to perform the migration by using the Exchange admin center.

You need to recommend which type of migration to use and which type of data to migrate.

What should you recommend? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

31. In Microsoft 365, you configure a data loss prevention (DLP) policy named Policy1. Policy1 detects the sharing of United States (US) bank account numbers in email messages and attachments.

Policy1 is configured as shown in the exhibit. (Click the Exhibit tab.)





You need to ensure that internal users can email documents that contain US bank account numbers to external users who have an email suffix of contoso.com.

What should you configure?

32. HOTSPOT

Your network contains an on-premises Active Directory domain named Contoso.com.

Your company purchase a Microsoft 365 subscription and establishes a hybrid deployment of Azure Active Directory (Azure AD) by using password hash synchronization.

You need to identify where an administrator can reset the password of each new user.

What should you identify? To answer, select the appropriate option in the area . NOTE: Each correct selection is worth point.

33. Note: This question it part of a series of questions that present the same scenario. Cacti question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a Microsoft Office 36S tenant.

You suspect that several Office 365 features were recently updated.

You need to view a last of the features that were recently updated in the tenant.

Solution: You use Message center in the Microsoft 365 admin center.

Does this meet the goal?

34. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an on-premises Active Directory domain named contoso.com.

The domain contains the users shown in the following table.





The domain syncs to an Azure Active Directory (Azure AD) tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)





User2 fails to authenticate to Azure AD when signing in as [email protected].

You need to ensure that User2 can access the resources in Azure AD.

Solution: From the on-premises Active Directory domain, you assign User2 the Allow logon locally user right. You instruct User2 to sign in as [email protected].

Does this meet the goal?

35. You have a Microsoft 365 subscription.

From the Security & Compliance admin center, you create a content search of all the mailboxes that contain the word ProjectX.

You need to export the results of the content search.

What do you need to download the report?

36. Your company has a Microsoft 365 subscription.

You need to identify all the users in the subscription who are licensed for Microsoft Office 365 through a group membership. The solution must include the name of the group used to assign the license.

What should you use?

37. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.

When the Next button is available, click it to access the lab section. In this section, you will

perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: oL9z0=?Nq@ox



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11098651







You need to prevent users in your organization from receiving an email notification when they save a document that contains credit card numbers.

To answer the question, sign in to the Microsoft 365 portal.

38. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username

below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: *yfLo7Ir2&y-



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10811525



Alex Wilber must be able to reset the password of each user in your organization. The solution must prevent Alex Wilber from modifying the password of global administrators.

39. Your company has 20 employees, Each employees has a mailbox hosted in Outlook.com.

The company purchases a Microsoft 365 subcription.

You plan to migrate all the mailboxes to Microsoft 365.

You need to recommend which type of migration to use for the mailboxes.

What should recommend?

40. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

You have a Microsoft 365 subscription.

You discover that some external users accessed content on a Microsoft SharePoint site. You modify the

SharePoint sharing policy to prevent sharing outside your organization.

You need to be notified if the SharePoint policy is modified in the future.

Solution: From the SharePoint admin center, you modify the sharing settings.

Does this meet the goal?

41. You need to meet the security requirement for the vendors.

What should you do?

42. HOTSPOT

You need to meet the application requirement for the Office 365 ProPlus applications.

You create a XML file that contains the following settings.





Use the drop-down menus to select the choice that complete each statement based on the information presented in the graphic . NOTE: Each correct selection is worth one point.

43. You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. The tenant includes a user named User1.

You enable Azure AD Identity Protection.

You need to ensure that User1 can review the list in Azure AD Identity Protection of users flagged for risk. The solution must use the principle of least privilege.

To which role should you add User1?

44. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an on-premises Active Directory domain named contoso.com.

The domain contains the users shown in the following table.





The domain syncs to an Azure Active Directory (Azure AD) tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)





User2 fails to authenticate to Azure AD when signing in as [email protected].

You need to ensure that User2 can access the resources in Azure AD.

Solution: From the Azure Active Directory admin center, you add fabrikam.com as a custom domain. You instruct User2 to sign in as [email protected].

Does this meet the goal?

45. HOTSPOT

You create a Microsoft 365 subscription.

You plan to deploy Microsoft Office 365 ProPlus applications to all the client computers at your company.

You prepare the following XML file for the planned deployment.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic . NOTE: Each correct selection is worth one point.

46. DRAG DROP

Your company has a hybrid deployment of Azure Active Directory (Azure AD).

You purchase a Microsoft 365 subscription.

You plan to migrate the Home folder of each user to Microsoft 365 during several weeks.

Each user has a device that runs Windows 10.

You need to recommend a solution to migrate the Home folder of five administrative users as quickly as possible.

Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

47. Which migration solution should you recommend for Project1?

48. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

You configure a pilot for co-management.

You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

Solution: You create a device configuration profile from the Intune admin center.

Does this meet the goal?

49. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the

password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: 3&YWyjse-6-d



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10887751



You plan to create 1,000 users in your Microsoft 365 subscription.

You need to ensure that all the users can use the @contoso.com suffix in their username.

Another administrator will perform the required information to your DNS zone to complete the operation.

50. HOTSPOT

Your network contains an Active Directory domain named contoso.com.

The domain contains the file servers shown in the following table.





A file named File1.abc is stored on Server1. A file named File2.abc is stored on Server2.

Three apps named App1, App2, and App3 all open files that have the .abc file extension.

You implement Windows Information Protection (WIP) by using the following configurations:

✑ Exempt apps: App2

✑ Protected apps: App1

✑ Windows Information Protection mode: Block

✑ Network boundary: IPv4 range of 192.168.1.1-192.168.1.255

You need to identify the apps from which you can open File1.abc

For each of the following statements, select Yes if the statement is true. Otherwise, select No . NOTE: Each correct selection is worth one point.

51. You have an on-premises Microsoft Exchange Server organization that contains 500 mailboxes and a third-party email archive solution.

You have a Microsoft 365 tenant that contains a user named User1.

You plan to use the User1 account to perform a PST import of the archive mailboxes to the tenant.

Which two roles does User1 require to perform the import? The solution must use the principle of least privilege. Each correct answer presents part of the solution . NOTE: Each correct selection is worth one point.

52. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory forest.

You deploy Microsoft 365.

You plan to implement directory synchronization.

You need to recommend a security solution for the synchronized identities.

The solution must meet the following requirements:

✑ Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.

✑ Users passwords must be 10 characters or more.

Solution: Implement password hash synchronization and modify the password settings from the Default Domain Policy in Active Directory.

Does this meet the goal?

53. Which migration solution should you recommend for Project1?

54. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: 3&YWyjse-6-d



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10887751



You need to modify Christie Cline to meet the following requirements:

✑ Christie Cline must be able to view the service dashboard and the Microsoft Office 365 Message center.

✑ Christie Cline must be able to create Microsoft support requests.

✑ The solution must use the principle of least privilege.

55. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy several Microsoft Office 365 services.

You need to design an authentication strategy for the planned deployment. The solution must meet the following requirements:

* Users must be able to authenticate during business hours only.

* Authentication requests must be processed successfully if a single server fails.

* When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in.

* Users who connect to Office 365 services from domain-joined devices that are connected to the internal network must be signed in automatically.

Solution: You design an authentication strategy that contains a pass-through authentication model. The solution contains two servers that have an Authentication Agent installed and password hash synchronization configured.

Does this meet the goal?

56. Topic 3, Misc. Questions



HOTSPOT

You have a Microsoft 365 subscription that uses a default named contoso.com.

Three files were created on February 1, 2019, as shown in the following table.





On March 1, 2019, you create two retention labels named Label1 and label2.

The settings for Label1 are configured as shown in the Label1 exhibit. (Click the Label1 tab.)

Label 1





The settings for Label2 are configured as shown in the Label1 exhibit. (Click the Label2 tab.)

Label 2





You apply the retention labels to Exchange email, SharePoint sites, and OneDrive accounts.

For each of the following statements, select Yes if the statement is true. Otherwise, select No . NOTE: Each correct selection is worth one point.

57. Your network contain*, an on-premises Active Directory forest.

You are evaluating the implementation of Microsoft 365 and the deployment of authentication strategy.

You need to recommend an authentication strategy that meets the following requirements:

• Allows users to sign in by using smart card-based certificates

• Allows users to connect to on premises and Microsoft 365 services by using SSO Which authentication strategy should you recommend?

58. You have a Microsoft 365 E5 subscription.

All users are assigned a license to Microsoft 365 Apps for enterprise.

The users report that they do not have the option to install Microsoft 365 apps on their device as shown in the following exhibit.





You need to ensure that the users can install Microsoft 365 apps from the Office 365 portal.

What should you do?

59. You have a Microsoft 365 Enterprise subscription.

You have a conditional access policy to force multi-factor authentication when accessing Microsoft SharePoint from a mobile device.

You need to view which users authenticated by using multi-factor authentication.

What should you do?

60. Your network contains an Active Directory forest named contoso.local.

You purchase a Microsoft 365 subscription.

You plan to move to Microsoft and to implement a hybrid deployment solution for the next 12 months.

You need to prepare for the planned move to Microsoft 365.

What is the best action to perform before you implement directory synchronization? More than one answer choice may achieve the goal. Select the BEST answer.

61. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: 3&YWyjse-6-d



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10887751



Your organization has an office in Seattle.

You plan to create 100 users who will work in the Seattle office. The city attribute for all the users will be Seattle.

You need to create a group named Group1 that will automatically contain all the Seattle office users.

62. You need to Add the custom domain name* to Office 36S K> support the planned changes as quickly as possible.

What should you create to verify the domain names successfully?

63. Your network contains an on-premises Active Directory domain.

You have a Microsoft 365 subscription.

You implement a directory synchronization solution that uses pass-through authentication.

You configure Microsoft Azure Active Directory (Azure AD) smart lockout as shown in the following exhibit.





You discover that Active Directory users can use the passwords in the custom banned passwords list.

You need to ensure that banned passwords are effective for all users.

Which three actions should you perform? Each correct answer presents part of the solution . NOTE: Each correct selection is worth one point.

64. You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

In the tenant, you create a user named User1.

You need to ensure that User1 can publish retention labels from the Security & Compliance admin center. The solution must use the principle of least privilege.

To which role group should you add User1?

65. You have a Microsoft Power Platform production environment that contains a custom model-driven Microsoft Power Apps app.

How many days will system backups be retained for the environment?

66. You have a Microsoft 36S subscription that contains several Microsoft SharePoint Online sites. You discover that users from your company can invite external users to access files on the SharePoint sites. You need to ensure that the company users can invite only authenticated guest users to the sites .

What should you do?

67. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain.

You deploy a Microsoft Azure Active Directory (Azure AD) tenant.

Another administrator configures the domain to synchronize to Azure AD.

You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully.

You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully.

You need to ensure that the 10 user accounts are synchronized to Azure AD.

Solution: From Azure AD Connect, you modify the Azure AD credentials.

Does this meet the goal?

68. HOTSPOT

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.





Multi-factor authentication (MFA) is configured to use 131.107.50/24 for trusted IPs.

The tenant contains the named locations shown in the following table.





You create a conditional access policy that has the following configurations:

✑ Users and groups assignment: All users

✑ Cloud apps assignment: App1

✑ Conditions: Include all trusted locations

✑ Grant access: require multi-factor authentication

For each of the following statements, select Yes if the statement is true. otherwise, select No . NOTE: Each correct selection is worth one point.